Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/zope2@2.13.0a4
Typepypi
Namespace
Namezope2
Version2.13.0a4
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.13.19
Latest_non_vulnerable_version2.13.19
Affected_by_vulnerabilities
0
url VCID-g2ap-vh6r-yqds
vulnerability_id VCID-g2ap-vh6r-yqds
summary AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.
references
0
reference_url https://bugs.launchpad.net/zope2/+bug/1071067
reference_id
reference_type
scores
url https://bugs.launchpad.net/zope2/+bug/1071067
1
reference_url https://github.com/advisories/GHSA-3qpr-7rmg-73v8
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-3qpr-7rmg-73v8
2
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-49.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-49.yaml
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-75.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-75.yaml
5
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
6
reference_url https://plone.org/products/plone/security/advisories/20121106/23
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/23
7
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5507
reference_id CVE-2012-5507
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-5507
fixed_packages
0
url pkg:pypi/zope2@2.13.19
purl pkg:pypi/zope2@2.13.19
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/zope2@2.13.19
aliases CVE-2012-5507, GHSA-3qpr-7rmg-73v8, PYSEC-2014-49, PYSEC-2014-75
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g2ap-vh6r-yqds
1
url VCID-khhr-m295-23gs
vulnerability_id VCID-khhr-m295-23gs
summary Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via unspecified vectors. NOTE: this issue was SPLIT from CVE-2012-5508 due to different vulnerability types (ADT2).
references
0
reference_url https://bugs.launchpad.net/zope2/+bug/1071067
reference_id
reference_type
scores
url https://bugs.launchpad.net/zope2/+bug/1071067
1
reference_url https://github.com/advisories/GHSA-48vv-2pmq-9fvv
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-48vv-2pmq-9fvv
2
reference_url https://github.com/plone/Products.CMFPlone
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone
3
reference_url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
reference_id
reference_type
scores
url https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-51.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-51.yaml
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-76.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-76.yaml
6
reference_url https://plone.org/products/plone-hotfix/releases/20121124
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121124
7
reference_url https://plone.org/products/plone/security/advisories/20121106/24
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/24
8
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-6661
reference_id CVE-2012-6661
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-6661
fixed_packages
0
url pkg:pypi/zope2@2.13.19
purl pkg:pypi/zope2@2.13.19
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/zope2@2.13.19
aliases CVE-2012-6661, GHSA-48vv-2pmq-9fvv, PYSEC-2014-51, PYSEC-2014-76
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-khhr-m295-23gs
2
url VCID-krfw-xa2b-vue5
vulnerability_id VCID-krfw-xa2b-vue5
summary ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2014-1194.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2014-1194.html
1
reference_url https://access.redhat.com/errata/RHSA-2014:1194
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1194
2
reference_url https://bugs.launchpad.net/zope2/+bug/930812
reference_id
reference_type
scores
url https://bugs.launchpad.net/zope2/+bug/930812
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=878939
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=878939
4
reference_url https://github.com/advisories/GHSA-77hv-8796-8ccp
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-77hv-8796-8ccp
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-28.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-28.yaml
6
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-73.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-73.yaml
7
reference_url https://plone.org/products/plone-hotfix/releases/20121106
reference_id
reference_type
scores
url https://plone.org/products/plone-hotfix/releases/20121106
8
reference_url https://plone.org/products/plone/security/advisories/20121106/02
reference_id
reference_type
scores
url https://plone.org/products/plone/security/advisories/20121106/02
9
reference_url http://www.openwall.com/lists/oss-security/2012/11/10/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/10/1
10
reference_url https://access.redhat.com/security/cve/CVE-2012-5486
reference_id CVE-2012-5486
reference_type
scores
url https://access.redhat.com/security/cve/CVE-2012-5486
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5486
reference_id CVE-2012-5486
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2012-5486
fixed_packages
0
url pkg:pypi/zope2@2.13.19
purl pkg:pypi/zope2@2.13.19
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/zope2@2.13.19
aliases CVE-2012-5486, GHSA-77hv-8796-8ccp, PYSEC-2014-28, PYSEC-2014-73
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-krfw-xa2b-vue5
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/zope2@2.13.0a4